tessie

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The purpose and command set are coherent for a Tessie/Tesla control skill, and data appears intended for official Tessie APIs. The main issue is trust: the skill depends on an unverified `tessie-api` CLI and forwards a vehicle-control API token into it. Because the CLI provenance was not established, this creates a disproportionate supply-chain and credential-forwarding risk despite otherwise plausible functionality.

Confidence: 86%Severity: 84%
Audit Metadata
Analyzed At
Oct 25, 2026, 01:36 PM
Package URL
pkg:socket/skills-sh/win4r%2Fmuseai-skills%2Ftessie%2F@c9a7f1d48ca02acdc1fd9e91f3e4b5f49f6df160676d72900d1610db1529c588